PT-2026-3410

Summary Since 2017, the default webpack plugins have passed the entire process.env to EnvironmentPlugin. This pattern exposed ALL build environment variables to client-side JavaScript bundles whenever application code or any dependency referenced process.env.VARIABLE NAME. This is not a regressio...

Malicious code in @tezign/html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 437929a07e5bc4e0e6dfe545fa858db027aa2ba4e6fa87701a09d5b07277b543 The package @tezign/html-webpack-plugin was found to contain malicious code...

EUVD-2025-198960

Malicious code in @tezign/html-webpack-plugin npm...

MAL-2025-190916 Malicious code in @tezign/html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 437929a07e5bc4e0e6dfe545fa858db027aa2ba4e6fa87701a09d5b07277b543 The package @tezign/html-webpack-plugin was found to contain malicious code...

EUVD-2025-180072

Malicious code in biogeochemistry-test-express-css-minimizer-webpack-plugin npm...

EUVD-2025-178508

Malicious code in html-webpack-plugin-hologram-stream-install npm...

EUVD-2025-178507

Malicious code in html-webpack-plugin-multiverse-proteomics-blackhole npm...

EUVD-2025-178067

Malicious code in lint-staged-lint-staged-auth-terser-webpack-plugin npm...

EUVD-2025-177433

Malicious code in optimize-css-assets-webpack-plugin-pm2-lyra-miranda npm...

EUVD-2025-177618

Malicious code in nextjs-html-webpack-plugin-express-gemini npm...

EUVD-2025-180327

Malicious code in ariel-markdown-arcturus-terser-webpack-plugin npm...

EUVD-2025-176004

Malicious code in terser-webpack-plugin-canopus-troposphere-ichnology npm...

EUVD-2025-179458

Malicious code in css-minimizer-webpack-plugin-superagent-npm-private npm...

EUVD-2025-180273

Malicious code in async-css-minimizer-webpack-plugin-heka-redgiant npm...

EUVD-2025-176606

Malicious code in rollup-plugin-chai-soap-terser-webpack-plugin npm...

EUVD-2025-175923

Malicious code in toml-terser-webpack-plugin-process-prompts npm...

EUVD-2025-177259

Malicious code in perseus-css-minimizer-webpack-plugin-janus-dependencies npm...

EUVD-2025-175628

Malicious code in wavefunction-optimize-css-assets-webpack-plugin-development-ursa npm...

EUVD-2025-179772

Malicious code in changelog-gridsome-perseus-css-minimizer-webpack-plugin npm...

EUVD-2025-179459

Malicious code in css-minimizer-webpack-plugin-phoebe-biogeochemistry-lint npm...